Barclayscrape v3.0

Code to programmatically manipulate Barclays online banking using Puppeteer.

Installation

Barclayscrape requires node.js version 10 or above which can be installed through your OS's package manager or Homebrew. Once Node is installed, barclayscrape can be installed on your system using:

$ sudo npm install -g barclayscrape

The barclayscrape executable will be installed in your path.

Alternatively, if you don't want to run npm as root, you can install it into node_modules in your home directory with:

$ npm install barclayscrape

And you can then execute barclayscrape with:

$ npx barclayscrape

Usage

Options:
  -V, --version       output the version number
  --otp [pin]         PINSentry code
  --motp [pin]        Mobile PINSentry code
  --plogin            Memorable passcode and password
  --no-headless       Show browser window when interacting
  -h, --help          output usage information

Commands:
  list [options]      List all available accounts
    -j, --json               Output account list in JSON format
  get_ofx <out_path>  Fetch .ofx files for all accounts into out_path
  get_ofx_combined <out_path> Download a single .ofx file containing all account activity, into out_path
  csv [options]       Fetch .csv files for accounts
    -p, --path <path>        Export path. defaults to ./export
    -f, --from <dd/mm/yyyy>  From date
    -t, --to <dd/mm/yyyy>    To date
  config              Set up login details

To start, barclayscrape config will ask you for your basic login details. You can test that the login works by running:

$ barclayscrape --otp <pin> list

Where <pin> is the eight-digit code generated by your PINSentry device. If you're using the mobile PINSentry facility then use --motp <pin> instead of --otp <pin>.

To download bank statements in OFX format, you can run:

$ barclayscrape --otp <pin> get_ofx ./output_dir/

This will download one file per account and place them in ./output_dir/.

Automating PINSentry Generation

Typing in your OTP every time is a pain, but there are ways of automating the process entirely using a USB smartcard reader.

SECURITY NOTE: This somewhat defeats the purpose of two-factor authentication, so please do not implement this unless you are confident in your ability to adequately secure the machine running it. It is your money at risk.

The python-emv package contains a tool to generate a one-time password on the command line. It can be hooked up to barclayscrape like so:

$ barclayscrape --otp `emvtool -p <PIN> cap` get_ofx ./output/

Please be aware that if you're putting this command into cron, any error emails will include your PIN in the subject line. It's worth using a small shell script to prevent this.

Logging in using memorable passcode

If your Barclays account has been configured to support logging in via passcode and password, this feature is supported using --plogin, allowing a completely automated login

PINSentry is still required to transfer funds to non-approved destinations.

SECURITY NOTE: It is not recommended you use this feature, unless you are aware of the security implications (credentials are NOT encrypted!).